Privacy Policy

Last updated: 21 March 2026

This privacy policy explains how Canopy Inventory Ltd (“Canopy”, “we”, “us”, or “our”) collects, uses, and protects personal data when you visit canopyinventory.com or use our services. We are registered in England and Wales. If you have any questions, contact us at hello@canopyinventory.com.

1. Information we collect

We collect information in the following ways:

• Information you provide directly. When you join our waitlist, contact us by email, or sign up for an account, we collect your name and email address.
• Shopify store data. If you install Canopy on your Shopify store, we access the data required to deliver the service: product data, inventory levels, orders, purchase orders, and location data. We access only what is necessary for the app to function.
• Usage data. We collect information about how you use our website and application, including pages viewed, features used, and session duration. This is collected via analytics tools and server logs.
• Cookie data. We use cookies and similar technologies to recognise returning visitors, maintain sessions, and understand site usage. See section 3 for details.

2. How we use your data

We use the data we collect to:

• Provide, operate, and improve the Canopy service
• Process and fulfil your subscription
• Send service-related communications (e.g. account notifications, product updates)
• Send marketing communications — only where you have given consent or we have a legitimate interest, and always with a clear unsubscribe option
• Analyse site and product usage to improve performance and user experience
• Comply with legal obligations

We will never sell your personal data to third parties.

3. Cookies

We use the following categories of cookies:

• Essential cookies. Required for the website and application to function correctly. These cannot be disabled.
• Analytics cookies. Help us understand how visitors use our site. We use privacy-friendly analytics tools and, where possible, anonymise IP addresses.
• Functional cookies. Remember your preferences (e.g. language, region) to improve your experience.

You can control cookie settings via your browser preferences. Disabling non-essential cookies will not affect your ability to use core features of the site.

4. Shopify data

Canopy is a Shopify app. When you connect your Shopify store, we access data via the Shopify API in accordance with Shopify's Partner Programme requirements. We use this data solely to provide inventory management functionality. We do not share your Shopify store data with third parties except where required to deliver the service (e.g. cloud hosting providers).

When you uninstall the Canopy app, your store data is deleted from our systems within 30 days, unless you request earlier deletion or we are required to retain it by law.

5. Analytics and third-party services

We may use third-party services to help us understand and improve our site and product. These may include analytics platforms, error monitoring tools, and customer support software. Each third-party provider has its own privacy policy. We select providers that meet GDPR standards.

6. Data retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Specifically:

• Waitlist data: retained until you unsubscribe or request deletion
• Account data: retained for the duration of your subscription, plus up to 2 years after cancellation for legal and accounting purposes
• Shopify store data: deleted within 30 days of app uninstall

7. Your rights under GDPR

If you are located in the UK or European Economic Area, you have the following rights:

• Right to access. Request a copy of the personal data we hold about you.
• Right to rectification. Ask us to correct inaccurate or incomplete data.
• Right to erasure. Request deletion of your personal data, subject to legal obligations.
• Right to restrict processing. Ask us to pause processing of your data in certain circumstances.
• Right to data portability. Receive your personal data in a structured, machine-readable format.
• Right to object. Object to processing based on legitimate interests, including direct marketing.

To exercise any of these rights, email us at hello@canopyinventory.com. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We take data security seriously. We use industry-standard encryption (TLS) for data in transit and encryption at rest for sensitive data. Access to production systems is restricted to authorised personnel only. No method of transmission or storage is 100% secure; in the event of a data breach, we will notify you and the relevant authorities as required by law.

9. International transfers

Our services and infrastructure may involve transferring your data outside the UK or EEA. Where we do so, we ensure appropriate safeguards are in place, such as standard contractual clauses, to protect your data in line with UK GDPR requirements.

10. Changes to this policy

We may update this privacy policy from time to time. Material changes will be communicated by email or a prominent notice on our website. The “last updated” date at the top of this page reflects the most recent revision.

11. Contact

If you have any questions or concerns about how we handle your data, please contact us: